DFM is showing lot's of authentication failure minor alarms which match the User Tracking major acquisition schedule.
The message description says the non-authenticated source is the IP address of the LMS server itself.
EVENT DESCRIPTION = MinorAlarm::Component=<managedDeviceName>: Authentication Failure;Description=Non-authenticated source :<LMS IP address>;
I have done a Device Credential Verification and it was successful for both snmp and cli
What would be causing this alarm?
The inactive name doesn't mean anything. Campus will label a VLAN as inactive if it's unable to obtain some VTP information from the switch. The problem is that a port is assigned to a VLAN that is not present on the switch. What will happen is that Campus will record all port access and auxiliary VLANs. UT will query all of these VLANs. However, if a port is configured in a VLAN that is not present on the switch, then the switch will throw an authFail unless the "no snmp-server trap authentication unknown-context" command is configured.
Unfortuantely, there is no other way to know (via SNMP) that a VLAN is not present on a switch. Therefore, to fix this, you'll need to either disable the unknown-context traps or correct the switch's config.
If your community strings contain '@' that could cause this. Depending on the configuration or UT or the version, this could also be a bug where UT is querying VLANs which do not exist on the switch.